Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: IUI36u0rPNK4nSH/QBYsStkdgWoVDHuco0N0wAqRkfg=
Subject key identifier: 9C:57:70:91:50:9E:92:33:75:25:85:C3:0D:2F:47:DE:C7:ED:38:D7
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 01984E5501629BCBF1A16480FC4431E741A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0EC7
Signing time: Mon 28 Jul 2025 00:00:50 +0000
Manifest this update: Mon 28 Jul 2025 00:00:50 +0000
Manifest next update: Tue 29 Jul 2025 00:00:50 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: 6oj1sNqOAOQWtroXyweP/ruHNzeK3JeWGtrZaCWumW4=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: tEflzcf84YeIQ7wQhAU1KUgL-Vw.roa (hash: 4tBHDD8ccamGIZtMNBVAmE3bow4OuhCBji726kCuMPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:55:01:62:9b:cb:f1:a1:64:80:fc:44:31:e7:41:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Jul 28 00:00:50 2025 GMT
Not After : Jul 29 00:00:50 2025 GMT
Subject: CN=9c577091509e9233752585c30d2f47dec7ed38d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:20:47:98:6f:3d:8f:6e:7e:12:e5:81:1e:03:
2f:06:3d:4e:83:4c:73:82:9c:87:9d:71:5a:60:c3:
f3:3e:1e:82:7a:c0:e0:c4:89:79:94:c4:1c:f9:37:
f6:6c:eb:8d:0f:50:8b:77:14:0b:37:50:f9:d5:ac:
0c:88:03:7d:68:6a:3f:05:0d:53:e4:6a:ae:d3:53:
61:5b:8b:5c:fc:9a:1b:88:bd:55:1f:34:b6:9c:a4:
36:79:94:d4:c0:ab:f9:c2:41:3b:eb:3b:90:42:5e:
94:11:87:c9:80:b4:b0:ad:8f:00:45:09:59:70:5f:
83:32:23:fb:80:7e:40:eb:1f:32:b6:b3:fc:2d:22:
43:c1:f2:83:6a:6b:79:87:06:17:47:2b:b9:cd:8f:
1c:2f:73:08:06:9f:2d:5d:95:f3:77:52:3b:3d:fc:
5b:2a:7f:70:5e:f9:3f:88:33:b5:3a:84:20:cd:e9:
63:2e:3f:42:af:47:57:56:59:a4:24:b1:28:7e:76:
34:c8:29:7e:4f:88:62:5c:e1:0d:a6:30:68:91:51:
c3:66:36:97:18:72:15:ad:96:be:4c:da:88:fa:d4:
a8:73:e9:83:ed:1b:10:03:5a:16:37:b0:d7:8b:57:
a2:96:e7:a8:d3:21:d2:e0:26:ab:12:e3:ab:ac:c8:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:57:70:91:50:9E:92:33:75:25:85:C3:0D:2F:47:DE:C7:ED:38:D7
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:39:40:28:b2:c1:51:cd:0f:6b:11:92:ce:49:60:42:d4:98:
4a:3f:a3:cd:cb:93:9f:f7:fb:5a:88:e5:07:8e:80:64:8b:6e:
cb:60:b5:d8:f1:c5:22:5e:32:40:0f:a4:73:fc:f2:3c:02:c6:
6e:1f:97:22:a1:2d:75:97:b4:be:60:1f:ff:f4:f6:cd:fc:d7:
14:4f:61:b0:67:1b:b5:a3:aa:a0:d3:e0:49:a1:b0:5f:a3:ee:
de:8e:a8:4a:20:b5:8e:92:e8:11:6e:d9:e0:fc:b6:17:75:1c:
14:0b:8d:8d:de:eb:7c:0a:da:4d:fc:15:69:45:2a:45:0a:e4:
65:3f:c0:df:b7:80:12:b5:72:99:e2:a3:f5:52:da:1d:4c:69:
27:bd:8b:a8:1b:e1:6f:91:21:b8:e4:b9:0b:35:aa:82:b6:c3:
45:ef:0c:ac:f6:d7:ce:f4:77:01:19:49:38:98:71:02:30:0c:
32:32:20:69:cb:53:da:90:3e:33:ef:96:35:14:a9:9b:88:84:
39:58:d0:73:a9:6f:8c:50:9a:30:6c:e1:de:e2:2d:85:f0:8d:
b7:3f:85:0b:9f:6c:0a:4e:8e:c0:5e:a3:52:e4:22:01:00:48:
63:e5:66:0b:c8:a8:61:39:aa:0c:3d:4f:45:2b:82:96:ba:96:
b4:c4:fc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 08:09:54 2025 by rpki-client